8875 Hidden River Pwky, Suite 300
Tampa, FL 33637
Telephone: (813) 315-9884
Fax Number: (813) 902-6160
Course 6432A:
Managing and Maintaining Windows Server 2008 Active Directory Servers
Length: 2 DaysPublished: June 13, 2008
Language(s): English
Audience(s): IT Professionals Level: 300
Technology: Windows Server 2008
Type: Course
Delivery Method: Instructor-led (classroom)
Course Outline Module 1: Managing an Active Directory Server Lifecycle
This module explains how to support and maintain Active Directory servers to meet changing business requirements in an enterprise environment.
Lessons:
Planning an Active Directory Server Deployment Using Active Directory Server Deployment Technologies Adding AD DS Server Roles
Removing AD DS Server Roles
Lab: Managing and Maintaining a Windows Server 2008 Domain Controller
Evaluating the Need for AD DS Promotion Meeting the Need by Adding a Role
Managing a Change Request for an RODC by Using the Command Line Developing a Management and Maintenance Plan
8875 Hidden River Pwky, Suite 300
Tampa, FL 33637
Telephone: (813) 315-9884
Fax Number: (813) 902-6160
After completing this module, students will be able to: Plan an Active Directory server deployment.
Identify different approaches to Active Directory server deployment. Add an AD DS server role.
Remove an AD DS server role.
Module 2: Creating Baselines for Active Directory Servers
This module explains how to create baselines using the WRPM and through analysis, make decisions to improve server performance.
Lessons:
Baseline Methodologies for Active Directory Servers WRPM Overview
Using Metrics to Create Baselines for Active Directory Servers
Lab: Creating Baselines for Active Directory Servers
Involving Users in Baseline Development
Choosing Relevant WRPM Counters and Durations
Evaluating and Revising a Baseline Document in the Face of Business Changes After completing this module, students will be able to:
Define strategies for developing baselines.
Explain the use of the WRPM as a baseline creation and revision tool.
Describe some of the specific metrics that may be relevant for the different Active Directory roles.
Module 3: Monitoring the System Health of Active Directory Servers
This module explains how to create and evaluate a monitoring plan based on business needs and environments. It also explains how to determine the health of Active Directory servers using performance monitoring and even log triggers.
Lessons:
System Health Overview
Using Long-Term Monitoring to Identify Trends
Setting Thresholds and Alerts for Short-Term Monitoring
8875 Hidden River Pwky, Suite 300
Tampa, FL 33637
Telephone: (813) 315-9884
Fax Number: (813) 902-6160
Lab: Monitoring the Active Directory Server Roles
Setting a Performance Alert to Meet a Business Goal Discussing Alert Response Strategies
Building a Case for Configuration Change After completing this module, students will be able to:
Define system health, server health, and Active Directory health.
Define the best procedures to ensure system health and optimal performance for Active Directory servers.
Set thresholds and alerts that are used for short-term monitoring.
Describe the Windows Server 2008 monitoring tools and how to decide when the different tools are appropriate in different business situations.
Module 4: Managing Active Directory Domain Services
This module explains how to implement the methodology of maintaining Windows Server 2008 AD DS.
Lessons:
Restarting and Restoring Active Directory
Overview of the Flexible Single Master Operations (FSMO) Roles Planning Sites and Replication
Managing RODCs
Methods of Managing Windows Server Core Best Practices for GPOs and Links
Delegating Active Directory Administration
Lab: Managing AD DS
Offline Defragging of the Active Directory Database Evaluating an RODC with Read-Only DNS Solution Making Site Replication Decisions
Group Policy Link Strategies
After completing this module, students will be able to:
Describe the impact of Windows Server 2008 methods for restarting Active Directory without rebooting. Define the FSMO roles and the Global Catalog pseudo-role.
Explain the importance of site definitions and how to optimize the AD DS replication activity. Explain the functionality of RODCs and the key benefits with RODCs deployed.
Explain the methods of managing Windows Server Core.
8875 Hidden River Pwky, Suite 300
Tampa, FL 33637
Telephone: (813) 315-9884
Fax Number: (813) 902-6160
Module 5: Maintaining Security for Active Directory Servers
This module explains how to deploy proven methods to harden the Active Directory servers.
Lessons:
Server Hardening Techniques
Using the MBSA to Discover and Remove Security Holes
Using Fine-Grained Password Policies to Simplify Network Organization Planning Security Auditing
Enhancing Physical Security
Lab: Maintaining Security for the Active Directory Servers
Manually Implementing AD DS Server Hardening Assessing Ongoing Security Requirements Deploying Fine-Grained Password Policies After completing this module, students will be able to:
Describe the techniques used for manual server hardening. Use the MBSA to discover and remove security holes.
Explain why you would use fine-grained password policies and how to maintain them. Explain when to perform security auditing and how to define a proper security baseline. Explain how to solve physical security problems and the ramifications of lax security policies.
Module 6: Managing Active Directory Service Roles
This module explains how to add non-AD-DS service roles to a Windows Server 2008 network and manage those roles with supplied tools.
Lessons:
Using Windows Server 2008 Tools for AD CS Implementing AD LDS
AD FS Overview AD RMS Overview
8875 Hidden River Pwky, Suite 300
Tampa, FL 33637
Telephone: (813) 315-9884
Fax Number: (813) 902-6160
Lab: Managing Active Directory Service Roles
Installing the AD LDS Role
Identifying Ongoing Management Concerns
Using Windows Server 2008 Tools for Managing AD LDS After completing this module, students will be able to:
Use the Windows Server 2008 tools to operate Certificate Services. Explain when to use AD LDS.
Identify management concerns with Active Directory Federation Services (AD FS).
Identify management concerns with Active Directory Rights Management Services (AD RMS).
In addition to their professional experience, students who attend this training should have technical knowledge equivalent to the following courses:
6424A: Fundamentals of Windows Server 2008 Active Directory
6425A: Configuring Windows Server 2008 Active Directory Domain Services
6426A: Configuring Identity and Access Solutions with Windows Server 2008 Active Directory 6430A: Planning and Administering Windows Server 2008 Servers
